Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa
File:                     68EAE318D09411EA9D19403FC4F9AE02.roa (raw, json)
Hash identifier:          4XnvS/mVt4krZEvK8Mt6aIcYDu95KaNvH0tNHh8rej4=
Subject key identifier:   44:F7:0D:C7:6E:9D:CD:19:88:E9:5D:D5:6B:4E:F2:5A:31:32:DC:E3
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       094F
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa
Signing time:             Tue 18 Aug 2026 20:40:41 +0000
ROA not before:           Tue 18 Aug 2026 20:40:41 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140947
IP address blocks:        103.153.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 20:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2383 (0x94f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
        Validity
            Not Before: Aug 18 20:40:41 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a84c348-a564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:8b:4b:c3:bd:89:a3:ee:38:39:3b:9c:af:
                    f4:09:c7:97:bf:a0:ff:74:a3:87:15:ff:82:9a:86:
                    e9:c1:a5:3b:57:d6:46:2f:89:1e:04:3e:a8:3b:46:
                    b8:12:60:3a:12:3a:41:b3:fa:72:51:7f:08:ae:4c:
                    8f:b0:52:c3:74:10:fc:fc:18:f5:92:a3:72:34:fa:
                    90:ef:8d:60:3a:6b:f0:2e:0d:39:8c:cd:d8:ba:89:
                    07:0f:fb:64:8b:e1:b9:5e:a9:06:35:be:dd:f8:a9:
                    48:3e:00:06:5b:d4:81:02:7a:d6:dd:c7:39:40:52:
                    ea:e4:a5:14:41:5c:eb:92:00:98:f6:6c:65:67:ea:
                    00:76:52:31:b1:46:f0:d3:bb:22:f9:08:01:9a:15:
                    7d:cc:6c:65:59:32:2f:bc:02:59:b5:2b:02:63:2b:
                    b6:6e:3e:09:49:57:a5:41:7b:e9:1c:2d:2e:26:44:
                    f0:51:e9:d9:0b:58:f9:34:f9:70:78:8f:75:45:48:
                    ad:15:ac:6d:1b:74:e6:aa:8b:16:84:cf:d9:60:26:
                    ed:7d:34:9c:50:42:dd:5c:b4:3a:4b:ff:f7:85:e6:
                    c8:a6:9b:4a:e7:7c:c5:59:a6:b8:2c:43:12:a4:d1:
                    e7:d2:70:83:ec:ed:71:90:e9:2c:ca:0d:6c:de:5e:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F7:0D:C7:6E:9D:CD:19:88:E9:5D:D5:6B:4E:F2:5A:31:32:DC:E3
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:18:ef:b8:19:a7:be:1b:ec:81:3e:5f:a1:bd:ad:a1:cd:51:
         8e:61:ed:1b:87:4e:a6:5d:39:a0:cd:f2:af:61:e2:4e:b0:6b:
         d7:71:9c:8d:b6:17:b9:e9:d7:1f:1c:50:cf:92:4f:6b:a0:c1:
         f1:25:d7:74:59:1e:b3:18:63:ad:07:06:aa:45:17:bf:41:00:
         bf:d3:bd:0b:c4:af:3c:9a:e2:aa:e1:9b:f2:dc:1f:d1:46:fd:
         38:0f:b5:d6:ac:6f:de:06:e2:e2:53:32:3d:f3:c2:c9:fb:2a:
         4a:32:84:8d:4f:64:a7:00:61:88:27:2b:81:b0:7c:94:0d:e5:
         2e:e5:b3:09:fa:86:36:23:07:cc:6e:7d:3c:a9:ff:e0:f8:38:
         d7:6e:d4:a7:e9:a1:6f:52:47:03:f9:86:b8:2e:76:6b:41:b2:
         5e:31:64:82:be:c4:44:7f:e9:3a:e3:75:93:b1:46:25:67:fc:
         bb:d2:72:a3:ce:a3:64:94:01:86:bb:1e:04:a5:2d:87:68:e7:
         c5:66:41:35:db:8c:42:04:f0:4d:d7:3f:5e:a1:10:bc:19:c6:
         af:0a:e3:49:f7:ec:45:f0:8a:d4:f6:d0:03:8c:b2:19:6d:06:
         2c:b3:d6:a1:d3:f4:af:cb:74:c3:b3:67:c9:96:4f:24:03:82:
         12:cd:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:05 2026 by rpki-client